Sub-processor List
Website: novomatica.com · Version 1.0 · Last updated 20 October 2026
These providers process personal data on our behalf, under a data processing agreement and only on our instructions. They support both our own work (enquiries, sales, invoicing) and, where a client authorises it, client projects.
DPF means the EU-US Data Privacy Framework adequacy decision, relied on where the provider is certified. SCCs means the Standard Contractual Clauses (EU) 2021/914 in the provider’s data processing agreement, used where DPF does not apply and as a fallback.
| Provider | What it does for us | Data involved | Location | Transfer safeguard |
|---|---|---|---|---|
| Contabo GmbH | Hosting of the website and our automation server (self-hosted n8n) | Website traffic, form submissions, automation data | Germany, servers in the EU | No transfer |
| Google Ireland Limited (Google Workspace) | Business email, calendar and booking page, video calls (Meet), documents and spreadsheets including invoices | Contact details, correspondence, bookings, invoice data | Ireland, with Google LLC (US) as sub-processor | DPF, SCCs |
| Google Ireland Limited (Google Analytics 4) | Website statistics, only with consent | Pseudonymous identifiers, pages visited, approximate location | Ireland and US | DPF, SCCs |
| Google (Gemini API, paid tier) | AI summary and priority score of enquiries; AI steps in client projects when authorised | Enquiry text and the contact details in it | US and EU | DPF, SCCs |
| Anthropic PBC | AI summary and priority score of enquiries; AI steps in client projects when authorised | Enquiry text and the contact details in it | US | DPF, SCCs |
| Cloudflare, Inc. | Bot protection on the contact form (Turnstile) | IP address, browser signals | US | DPF, SCCs |
| Attio Ltd | CRM for enquiries and clients | Contact details, company, enquiry and deal notes | United Kingdom, hosting in Belgium and US | UK adequacy decision, SCCs for US hosting |
| Slack Technologies, LLC | Internal notifications about new enquiries | Name, company, enquiry summary | US | DPF, SCCs |
| Zoom Communications, Inc. | Video calls when a client prefers Zoom | Name, email, call audio and video | US | DPF, SCCs |
| Notion Labs, Inc. | Internal project and task management | Client contact and project information | US | DPF, SCCs |
| Formagrid, Inc. (Airtable) | Client records and financial tracking | Client contact, project and billing information | US | DPF, SCCs |
| External accountant (gestoría) | Bookkeeping and tax filings | Invoices and client billing details | Spain | No transfer |
Recipients that act under their own responsibility are not processors and are not listed here: banks and payment providers (Wise, Payoneer, Stripe), WhatsApp, Upwork and public authorities. They are described in our Privacy Policy.
We update this list before a new provider starts processing personal data. Clients with a signed Data Processing Agreement are told in advance, as the agreement sets out.